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Abstract — We consider the General Gaussian Multiple Access 
Wire-Tap Channel (GGMAC-WT). In this scenario, multiple 
users communicate with an intended receiver in the presence of 
an intelligent and informed eavesdropper. We define two suitable 
secrecy measures, termed individual and collective, to reflect 
the confidence in the system for this multi-access environment. 
We determine achievable rates such that secrecy to some pre- 
determined degree can be maintained, using Gaussian codebooks. 
We also find outer bounds for the case when the eavesdropper 
receives a degraded version of the intended receiver's signal. In 
the degraded case, Gaussian codewords are shown to achieve 
the sum capacity for collective constraints. In addition, a TDMA 
scheme is shown to also achieve sum capacity for both sets of 
constraints. Numerical results showing the new rate region are 
presented and compared with the capacity region of the Gaussian 
Multiple-Access Channel (GMAC) with no secrecy constraints. 
We then find the secrecy sum-rate maximizing power allocations 
for the transmitters, and show that a cooperative jamming scheme 
can be used to increase achievable rates in this scenario. 

I. Introduction 

Shannon, in [1], analyzed secrecy systems in communi- 
cations and showed that to achieve perfect secrecy of com- 
munications, the conditional probability of the cryptogram 
given a message must be independent of the actual transmitted 
message. In [2], Wyner applied this concept to the discrete 
memoryless channel, with a wire-tapper who has access to a 
degraded version of the intended receiver's signal. He mea- 
sured the amount of "secrecy" using the conditional entropy 
A, the conditional entropy of the transmitted message given 
the received signal at the wire-tapper. In [2], the region of all 
possible (R, A) pairs was determined, and the existence of 
a secrecy capacity, C s , for communication below which it is 
possible to transmit zero information to the wire-tapper was 
shown. 

Carleial and Hellman, in [3], showed that it is possible 
to send several low-rate messages, each completely protected 
from the wire-tapper individually, and use the channel at close 
to capacity. However, if any of the messages are available to 
the wire-tapper, the secrecy of the rest may also be compro- 
mised. In [4], the authors extended Wyner's results in [2] and 
Carleial and Hellman's results in [3] to Gaussian channels. 

Csiszar and Korner, in [5], showed that Wyner's results can 
be extended to weaker, so called "less noisy" and "more ca- 
pable" channels. Furthermore, they analyzed the more general 
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case of sending common information to both the receiver and 
the wire-tapper, and private information to the receiver only. 

It was argued in [6], that the secrecy constraint developed 
by Wyner and later utilized by Csiszar and Korner was "weak" 
since it only constrained the rate of information leaked to the 
wire-tapper, rather than the total information. It was shown that 
Wyner's scenario could be extended to "strong" secrecy using 
extractor functions with no loss in achievable rates, where the 
secrecy constraint is placed on the total information obtained 
by the wire-tapper, as the information of interest might be in 
the small amount leaked. 

Maurer, [7], and Bennett et. al., [8], later focused on the 
process of "distilling" a secret key between two parties in 
the presence of a wire-tapper utilizing a source of common 
randomness. In this scenario, the wire-tapper has partial infor- 
mation about a common random variable shared by the two 
parties, and the parties use their knowledge of the wire-tapper's 
limitations to distill a secret key. Reference [7] showed that for 
the case when the wire-tap channel capacity is zero between 
two users, the existence of a "public" feedback channel that 
the wire-tapper can also observe, enables the two parties to be 
able to generate a secret key with perfect secrecy. 

In [9] and [10], the secrecy key capacities and common ran- 
domness capacities, the maximum rates of common random- 
ness that can be generated by two terminals, were developed 
for several models. Csiszar and Narayan extended Ahslwede 
and Csiszar's previous work to multiple-terminals by looking 
at what a helper terminal can contribute in [11], and the case of 
multiple terminals where an arbitrary number of terminals are 
trying to distill a secret key and a subset of these terminals 
can act as helper terminals to the rest in [12], Venkatesan 
and Anantharam examined the cases where the two terminals 
generating common randomness were connected via discrete 
memoryless channels (DMC's) in [13], and later generalized 
this to a network of DMC's connecting any finite number of 
terminals in [14]. 

More recently, the notion of the wire-tap channel has been 
extended to parallel channels, [15], [16], relay channels, [17], 
and fading channels, [18]. Fading and parallel channels were 
examined together in [19], [20]. Broadcast and interference 
channels with confidential messages were considered in [21]. 
References [22], [23] examined the multiple access channel 
with confidential messages, where two transmitters try to keep 



their messages secret from each other while communicating 
with a common receiver. In [22], an achievable region is found 
in general, and the capacity region is found for some special 
cases. 

In this paper, we consider the General Gaussian Multiple 
Access Wire-Tap Channel (GGMAC-WT), and present our re- 
sults to date under the fairly general model of a wireless chan- 
nel through which each user transmits open and confidential 
messages. We consider two separate secrecy constraints, which 
we call the individual and collective secrecy constraints, to 
reflect the differing amounts of confidence that users can place 
on the network, as defined in [24]. These two different sets 
of security constraints are (i) the normalized entropy of any 
set of messages conditioned on the transmitted codewords of 
the other users and the received signal at the wire-tapper, and 
(ii) the normalized entropy of any set of messages conditioned 
on the wire-tapper's received signal. Individual constraints are 
more conservative to ensure secrecy of any group of users 
even when the remaining users are compromised. Collective 
constraints, on the other hand, rely on the secrecy of all users, 
and as such enable an increase in the achievable secrecy rates. 
In [24], we considered perfect secrecy for both constraints for 
the degraded wire-tapper case. In [25], [26], we examined the 
achievable rates when we relaxed our secrecy constraints so 
that a certain amount < 5 < 1 of the total information 
was to be kept secret for the degraded case. We also found 
outer bounds for the secrecy rates, and showed using collective 
secrecy constraints, the Gaussian codebooks achieve sum 
capacity. In addition TDMA was shown to be optimal for both 
constraints and achieve sum-capacity. In [27], we considered 
the General (non-degraded) GMAC and found an achievable 
secrecy/rate region. In this case, we were also presented with 
a sum-rate maximization problem, as the maximum achievable 
rate depends on the transmit powers. We noted that users may 
trade secrecy rates such that even "bad" users may achieve 
positive secret rates at the behalf of the "good" users. In 
addition, we found the sum-rate maximizing power allocations. 
We also introduced the notion of a subset of users jamming 
the eavesdropper to help increase the secrecy sum-rate. This 
notion, which we term cooperative jamming, is considered in 
detail in this paper. 

II. Main Results 
Our main contributions in this area are listed below, 

1) We define two sets of information theoretic secrecy 
measures for a multiple-access channel: 

< Individual: Secrecy is maintained for any user even 
if the remaining users are compromised. 

« Collective: Secrecy is achieved with the assumption 
that all users are secure. 

2) Using Gaussian codebooks, we find achievable regions 
for both sets of constraints. These rates may be strength- 
ened as in [6] to get strong secret key rates. 

3) For the degraded case, we find outer bounds for both sets 
of constraints and show that the sum capacity bound is 
the same for both sets of constraints. 



• For individual constraints, the achievable region is 
a subset of the outer bounds, but using TDMA it is 
possible to achieve the sum capacity. 

• For collective constraints, it is shown that Gaussian 
codebooks achieve the sum capacity. 

These outer bounds are "strong" in the sense of [6], 
and hence we determine the strong secrecy key sum- 
capacities when the eavesdropper is degraded. 

4) When the transmitters only have secret messages to 
send, we determine the power allocations that maximize 
the secrecy sum-rate. 

5) We show that a scheme where users cooperate, with 
"bad" users helping "better" users by jamming the 
eavesdropper, may achieve higher secrecy rates or allow 
the "better" user to achieve a positive secrecy capacity. 
We term this scheme cooperative jamming. 

III. System Model and Problem Statement 




Fig. 1. The standardized GMAC-WT system model 



We consider K users communicating with an intended 
receiver in the presence of an intelligent and informed eaves- 
dropper. Each transmitter k £ K, = {1,2, ... ,K} chooses 
a secret message W% from a set of equally likely messages 
Wj| = {1, . . . , A/fc}, and an open message W£ from a set 
of equally likely messages W k = {1, . . . , M£}. Let M k = 
M s k M°, W k = (W fc s ,W£), and W k = Wj x W°. The 
messages are encoded into n-length codes {XJ}(W k )}- The 
encoded messages {X^} = {X£} are then transmitted, and 
the intended receiver and the wire-tapper each get a copy Y = 
Y n and Z = Z n . The receiver decodes Y to get an estimate of 
the transmitted messages, W. We would like to communicate 
with the receiver with arbitrarily low probability of error, while 
maintaining perfect secrecy for the secret messages given a set 
of secrecy constraints to be defined shortly. By intelligent and 
informed eavesdropper, we mean that the channel parameters 
are universally known, including at the eavesdropper, and that 
the eavesdropper also has knowledge of the codebooks and 
coding scheme known. The signals at the intended receiver 
and the wiretapper are given by 



Y 
Z 



(1) 

(2) 



where N M ,N W are the AWGN. Each component of N M ~ 
Af (0, <7„) and N w ~ Af (0, er^) . We also assume the following 



transmit power constraints: 
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We examine the GGMAC-WT by an equivalent standard 
form, as in [26]: 
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z = Ef =1 - 



//i fe Xfc + N w 
where 

• the original codewords are scaled to get 

• The wiretapper's new channel gains are hk 

• The noises are normalized by N 



(4) 
(5) 




• The new maximum power constraints are Pj. = -j-Pfc. 

CT M 

We can show that the eavesdropper gets a stochastically 
degraded version of the receiver's signal if hi = ... = 
hx = h < 1. Since the receivers do not cooperate, the 
capacity region depends only on the conditional marginals, 
and is equivalent to that of a physically degraded channel, 
which in turn is equivalent to Z being a noisier version of Y: 

Z = \fhY 



(6) 



where N MW ~ TV (0, (1 — h)T). In practical situations, we can 
think of this as the eavesdropper being able to wire-tap the 
receiver rather than receive the signals itself. 

A. Secrecy Measures 

We aim to provide each group of users with a pre- 
determined amount of secrecy. Letting As be our secrecy 
constraint for any subset S of users, we require that A$ > 1 
for all sets S C JC. To that end, in [24], we used an approach 
similar to [2], [4], and defined two sets of secrecy constraints 
using the normalized equivocations. These are: 

1) Individual Constraints: Define 



4 ff(VK fc s |X fc c,Z) 
H{W?) 



Vfc = 1,...,K 



(7) 



0, 



where fc c is the set of all users except user fc. If H(W k 
we define A' fc = 1. A' k denotes the normalized entropy of a 
user's message given the received signal at the wire-tapper as 
well as all other users' transmitted symbols. This constraint 
guarantees that information obtained at the wire-tapper about 
the user fc's signal is limited even if all other users are 
compromised. Let W 5 = {W k } keS for any set S C JC of 
users. Define 



A 1 , 



4 g(W||X 5 c,Z) 



MS C JC = {!,..., if} (8) 



Assume A' fc > <5 for all users in a set <S = {1, . . . , S}. Then, 
we can show that 

tf(W 5 |X 5 c,Z) =ELi#raW? i ... jfe _ 1 ,X 5o ,Z) (9) 

>Eti^(^|w?,..., fc -i,x fec ,z) (io) 



= ELiH(Wi\X k .,Z) (11) 

> ELi«W) (12) 
= SH(W S S ) (13) 

where Wf ; = {W{, . . ., W^J, and we used W%. -> 
Xfe — > Z. Hence, individual constraints on each user guarantee 
that the constraint is satisfied for all groups of users. 

2) Collective Constraints: The individual constraints (7) 
are a conservative measure as they reflect the case where users 
do not trust the secrecy of other users. We next define a revised 
secrecy measure to take into account the multi-access nature 
of the channel, where there is more trust in the system, and 
users can count on this to achieve higher secrecy rates: 

ff(Wfc|Z) 



AC A. 

— 



(14) 



which is the normalized equivocation of all the secret messages 
in the system. Similar to the individual constraints case, 
consider this measure for an arbitrary subset S of users: 

g(W||Z) 



ac A 
l\ s — 



(15) 



ff(W|) 

Assume A^ > 1 — e for some arbitrarily small e. Then, 

H(W' K \Z) > H(W S K ) - eH(W s K ) (16) 
H(W S S \Z) > ff(W|) + H(W' Se \W%) - eH(W s K ) 

-H(WS.|WS,Z) (17) 
> ff(W|) - eH(W s K ) (18) 

(19) 



A c s > 1 - e' 
where e' = thStM e - 



H(W%] 



as e -► 0. If H(W S S ) = 0, then 
we define A5 = T. Thus, the perfect secrecy of the system 
implies the perfect secrecy of any group of users. Hence, we 
only impose the system secrecy constraint in (14). Note that 
in the previous section, we showed that if A' fc > 1 — e for 
all k, then A 1 ^ = A^ > 1 — e, which is why the collective 
constraint is strictly weaker than the individual constraint. 

B. Preliminary Definitions 

Definition 1 (Achievable rates). Let R fe = [R%,R%). The 
rate vector R = (Ri, . . . , Rjf) is said to be achievable if 
for any given e > there exists a code of sufficient length n 
such that 



-log 2 M^>R s k -e k = l,...,K 
n 

-log 2 M%>R° k -e k = l,...,K 



(20) 
(21) 



and 

P. 



1 



Pr{W ^ W|W sent} < e (22) 



wex- =1 w fc 

is the average probability of error. In addition, 

A^ > 1 — e, Vfc e /C, if using individual constraints (23) 
A£; > 1 — e, if using collective constraints (24) 



We will call the set of all achievable rates C for individual 
constraints, and C c for collective constraints. 

Definition 2 (Achievable rates with ^-secrecy). We say 

that R A = (Rf , . . . , R S K ) is 5-achievable if a rate R is 



achievable such that R, 



Rl 



R° k and nr^o 



> s, 



Vfc G JC. Since the whole message for a user, W k is uniformly 
distributed in Wk, this is equivalent to stating that at least 
a portion < <5 < 1 of the message is secret for each user. 
When (5 = 1, then all users want to maintain perfect secrecy, 
i.e., there is no open message. When 5 = 0, then the system 
is a standard MAC with no secret messages. 

Before we state our results, we also define the following: 



<?(£) = ^ iog 2 (1 + 6, 



[£] + =max{e,0} (25) 



C3(P)=s(£ fce5 A), CS(P)4 5 (£ fce5 /» fc i\) (26) 



CJ(P) 



1 + Ekes^ h ^ p k 



kes 



V = {P = (Pi,...,P K ):0<P k < P k , Vfc e K] (28) 

where it should be noted that C M ,C W and C w are functions of 
the transmit powers, even when it is not made explicit in the 
text to simplify notation. 

IV. Achievable Secrecy Rate Regions 

In this section, we find a set of achievable rates using 
Gaussian codebooks and simultaneous superposition coding 
as described in Appendix I-A, which we call Q l for individual 
constraints, and Q c for collective constraints. We also find a 
region achievable using TDMA, and is valid for both sets of 
constraints. This region, which we call G T , is a subset of the 
achievable region when using collective constraints, but en- 
larges the achievable region when using individual constraints. 
We should also note that these rates can be strengthened using 
extractor functions as shown in [6], for details see [28]. 

A. Individual Secrecy 

In [4], it has been shown that Gaussian codebooks can be 
used to maintain secrecy for a single user wire-tap channel. 
Using a similar approach, we show that an achievable region 
using individual constraints is given by: 

Theorem 1. Define (?'(P) = 

'Ekes Rt<[Cs- Ekes Ck} + > ^ 

Then, the region 

Q ] = convex closure of <?'(P) 
Pev 

is achievable with individual constraints. 
Corollary 1.1. Define £%(P) = 



R: 



(30) 



R d 



l^kes n k - s L°5 ~ l^kes J 



keS n k - ^Si 



VS 



(31) 



Then, the region 

Q\ = convex closure of Gg(P) 



(32) 



Per 



is J-achievable with individual constraints. 

Proof: See Appendix I-B. □ 

B. Collective Secrecy 

In this section, we give an achievable rate region for 
collective constraints. Our main result is: 

Theorem 2. Define G C (P) = 



R: 



CI 



[Ekes (R s k + R° k )<c% 

Then, the region 

Q c = convex closure of G C (P) 



(33) 



(34) 



Pev 



is achievable with collective constraints 
Corollary 2.1. Define G C S (P) = 

'E k= iRl<\[c 



R° 



kes n k - °si 



Then, the region 

Gg = convex closure of Gg(P) 



(35) 



(36) 



Pev 



is (5-achievable with collective constraints. 

Proof: See Appendix I-C. □ 

C. Time-Division Multiple-Access 

We can also use TDMA to get an achievable region. 
Consider this scheme: Let a k G [0,1], k = 1,...,K and 
E k =i ak ~ User k only transmits a k of the time with 
power Pk/a.k, hence satisfying the average power constraints. 
The transmission uses the scheme described in [4]. Since only 
one user is transmitting at a given time, both sets of constraints 
collapse down to a set of single-user secrecy constraints, for 
which the results were given in [4]: 



Theorem 3. Define, 



(29) S T ( P >«) 



R: 



Ri < ak 



( (i-h k )p k 

\ a k +h k P k 



Rl 



Then, the following set of rates is achievable: 

G T = convex closure of [^J G T (P, ot) 



(37) 



(38) 



Pev CMoHi 

T, k=1 °k = 1 



Corollary 3.1. Define 



^(p,«)M R 



Rl<r 



y [ a k +h k P k 



(39) 



Then, the region 

Q} = convex closure of G}(P, ot) 



(40) 



P£V 



is (^-achievable. 



Proof: See Appendix I-D. □ 
For collective secrecy constraints, Q T is a subset of Q c . 
For individual secrecy constraints, however, this region is 
sometimes a superset of Q\ and sometimes a subset of Q\ 
but most of the time it helps enlarge this region. We can then, 
using time-sharing arguments, find a new achievable region for 
individual constraints that is the convex-closure of the union 
of the two regions, i.e., 

Proposition 4. The following region is achievable for indi- 
vidual secrecy constraints: 

g\j = convex closure of (Q 1 U £ T ) (41) 

V. Outer Bounds For Degraded Eavesdropper 

In this section, we present outer bounds on the sets of 
achievable secrecy rates for the degraded case. We find the se- 
crecy sum-capacity which is equal for both sets of constraints, 
and show the region given in Theorem 2 achieves this capacity, 
as does the TDMA region given in Theorem 3. 

A. Individual Secrecy 

Theorem 5. For the GMAC-WT, given the set of transmit 
powers P, the achievable rates for individual constraints 
belong to the region 



R: \Ri<ct-ci, v fc 



Corollary 5.1. The (5-achievable rates must be in the region 
below: 



lE fee5 ^<c«, vs 



Proof: See Appendix II-A. 



□ 



B. Collective Secrecy 

Our main result is presented in the following theorem: 

Theorem 6. For the GMAC-WT with collective secrecy con- 
straints, given the transmit power P, the secure rate-tuples 
must be in the region 



k=l n k - K °X 



s c (p)H R: 



(44) 



Corollary 6.1. The <5-achievable rates must be in the region 



jEf=i^<Hc£-c£), vfc' 



Proof: See Appendix II-B 



(45) 



C. Secrecy Sum-Capacity 

For the degraded case, we can find the secrecy sum- 
capacities for both sets of constraints. Incidentally, the secrecy 
sum-capacity is the same, and is stated below: 

Theorem 7. For the degraded case, the secrecy sum capacity 
is given by 



K 

£^<c£ 
fe=i 



(1 - h)P K 
1 + hPr 



(46) 



Proof: See Appendix III □ 
The converses proven in this section for the degraded case 
are strong converses in the sense of [6]. Strengthening the 
achievable rates as shown in the same paper thus establishes 
the strong secret key sum-capacity for the degraded case. 

VI. Maximization of Sum Rate for Collective 
Constraints & Cooperative Jamming 

Clearly, the collective secrecy constraints are more interest- 
ing in the sense that they utilize the multi-access nature of the 
channel. When we impose individual constraints, each user 
has to fend for itself, confusing the eavesdropper without de- 
pending on the other users. However, this only allows "good" 
users to be able to communicate. Collective constraints, on the 
other hand, allow users to help each other, and achieve a larger 
rate region. Thus, in this section we concentrate on collective 
constraints. 

The achievable region given in Theorem 2 depends on the 
transmit powers. We are naturally interested in the power 
allocation P* = (P*, . . . , P£) that would maximize the total 
secrecy sum-rate. For ease of illustration, we consider the 
K = 2 user case, and assume hi < h 2 - In other words, user l's 
channel is "better" than user 2's channel since a lower channel 
gain means less information leaks to the eavesdropper. 

A. Sum-Rate Maximization 

We would like to find the power allocation that will max- 
imize the secrecy sum-rate achievable found in Theorem 2. 
Stated formally, we are interested in 

max Cl-Cl= max g (P 1 + P 2 ) - g (h 1 P 1 + h 2 P 2 ) (47) 



= min p(P) 



(48) 



where p(P) = 1+ i+^ 1 X h p 2 P2 » we usec ' me rnonotonicity of 
the log function. The solution to this problem is given below: 

Theorem 8. The secrecy sum-rate maximizing powers are 



if hi < 1, h 2 < 



(p;,p;) 



(Pi,0), 

(0,0), otherwise 
Proof: See Appendix IV-A. 



1 + hiPi 
1+P L 

if hi <l,h 2 > 



(49) 



□ 



□ This result is easily generalized to K > 2 users, see [28]. 




(a) individual constraints 




(b) collective constraints 
Fig. 2. The two-user rate region vs <5. h = 0.5. 
B. Cooperative Jamming 

The solution to the optimization problem given in Theorem 
8 shows that when h 2 > ^pf 1 , which implies g (j^Pi ) - 
g ( ^ for all P 2 > 0, then user 2 should not transmit as 
it cannot achieve secrecy. However, such a user k has high 
eavesdropper channel gain, hk, and if it started "jamming" 
the channel, then it would harm the eavesdropper more than it 
would the intended receiver. Since the secrecy capacity for 
the remaining single user is the difference of the channel 
capacities, it might be possible to increase user l's capacity, 
or even, when hi > 1 allow it to start transmitting. The 
jamming is done simply by transmitting white Gaussian noise, 
i.e., X2 ~ jV(0, P2I). As shown in [28], it is always better 
for "bad" users to jam. The problem is finding the power 
allocations that will maximize the secrecy capacity for user 
1, formally stated as: 

Pi \ J h 1 P 1 \ _ . P (P) 



max q 
Pev ' 



1 + P> 



1 + h 2 P 2 



= mm ■ 



i(P 2 



(50) 



where <fij (P) 



l + P 



Note that we must have <fi 2 (P2) > 1 to 
have an advantage over not jamming. In general, this scheme 
can be shown to achieve the following secrecy capacity: 

Theorem 9. The secrecy capacity using cooperative jamming 
is g ( - 1 ]^pt+h 2 h p) P ' 2 j where the optimum power alloca- 
tions are given by (P 1 *, P 2 *) = 



f(Pi,0), 
(P 1 ,[min{p,P 2 }] + ), 
(Pi,min {p,P 2 }), 

1(0,0), 



if hi < 1, < h 2 

if h l <l,h 2 >\ 

if hi > 1, ±Eh < P 2 



< 1 



(51) 



if hi > 1, 



hi-l 
hi — hi 



>P 2 



where p = , hl , 1 



y?ll/l2(/l2-l)[(/l2-l) + (/l2-/ll)Pl] 




(a) individual constraints 




(b) collective constraints 
Fig. 3. The two-user rate region vs h. 5 = 0.5. 

Proof: See Appendix IV-B. □ 
In the case unaccounted for above, when hi < 1 and h 2 < 
t+p~ ' ^ om users should be transmitting as shown in Theorem 
8. The solution shows that the jamming user should jam if it 
is not single-user decodable, and if it has enough power to 
make the other user "good" in the new standardized channel. 
For the case with K > 2 users, see [28]. 

VII. Numerical Results 

In this section, we present numerical results to illustrate the 
achievable rates and our cooperative jamming scheme. To see 
how the channel parameters and the required level of secrecy 
affect the achievable rates, we consider the two-user degraded 
case as illustrated in Figures 2,3. We observe that if the wire- 
tapper's degradedness is severe (h — ► 0), then the secrecy 
sum-capacity goes to g(Pjc), i.e., we incur no loss in sum 
capacity and can still communicate with perfect secrecy as 
the sum capacity is achievable for both sets of constraints. 
On the other hand, if the wire-tapper is not severely degraded, 
(h — * 1), then the secrecy sum-capacity becomes zero. Another 
point to note is that the <5-achievable sum-secrecy capacity 
is limited by ^ log ( rj^p^ ) , and this term is an increasing 
function of P/c- However, as P/c — > oo, it is upper bounded 
by — Tjjlog/i. We see that regardless of the available power, 
the sum capacity with a non-zero level of secrecy is limited 
by the degradedness, h, and the level of secrecy required, S. 

We also show the results of a scenario with a mobile 
eavesdropper (in general non-degraded) and a static base 
station in a 100 x 100 grid. We use a simple path loss model, 
and show the optimum transmit/jamming powers when the 
eavesdropper is at (x, y) in Figure 4(a), and the resulting sum- 
rates achieved with and without cooperative jamming in Figure 
4(b), where lighter shades correspond to higher values. Users 
need higher jamming powers when the eavesdropper is closer 




(a) User Powers 




Fig. 4. 



(b) Sum-Rate 
Cooperative jamming example. 



to the base station, but higher rates are achieved with less 
power when the eavesdropper is closer to the jammer. Also, 
the area near the BS where secrecy sum-rate is zero without 
cooperative jamming is reduced. 

VIII. Conclusion 
In this paper, we considered the GMAC in the presence 
of an external eavesdropper from which information is to be 
kept secret. We have established achievable rates, and outer 
bounds on secrecy capacity for certain scenarios. We have 
shown that the multiple-access nature of the channel can 
be utilized to improve the secrecy of the system. Allowing 
confidence in the secrecy of all users, the secrecy rate of a 
user is improved since the undecoded messages of any set of 
users acts as additional noise at the wire-tapper and precludes 
it from decoding the remaining set of users. We have also 
found the sum-rate maximizing power allocations, and show a 
novel scheme, which we call cooperative jamming, which can 
be utilized to increase the achievable sum-rate. We note the 
cooperative achievements that are possible for the GGMAC- 
WT with collective secrecy: (i) "good" users may sacrifice 
their rates so that some "bad" users can achieve positive 
secrecy rates, and (ii) really "bad" users may sacrifice power 
to help the actual transmitters by jamming the eavesdropper. 

Appendix I 
Achievable Rates 
A. Superposition Encoding Scheme 

For each user k € K, consider the scheme: 
1) Generate 3 codebooks Xt,X k and X k . 



X s k consists of 



M k codewords, each component of which is drawn ~ 
Codebook X k has M k codewords with 



Af(0,\ s k P k -e 
each component randomly drawn 



Af(0,\° k P k -e) and 



words are satisfied with high probability and A? -r ^ k 



X% = 1. Define R% 



number to ensure that the power constraints on the code 

K 

ilogMf, Ml 
±\ogMl=Ri+R° k + Rl. 
2) To transmit message W fe = (W k , W k ) G W k x W k , user 
k finds the 2 codewords corresponding to components of 
Wfe and also uniformly chooses a codeword from X k . He 
then adds all these codewords and transmits the resulting 
codeword, Xfe, so that we are actually transmitting one of 
M k codewords. Since codewords are chosen uniformly, for 
each message W k , we transmit one of M k M k codewords. 



B. Individual Constraints 

Let P G V and R satisfy (29). We choose to satisfy: 



Efces ( R k 



Rk + Rk - °fc ; 
R° k + R x k )<C%, 



Vfc G K (52) 
VS c K (53) 



if R k > 0, and if Rf. = 0, then we set R k = and we do not 
impose the condition given in (52). If R satisfies (29), we can 
always choose {R x } to satisfy the above. 

Consider the subcode {£|}{L-,. From this point of view, 
the coding scheme described is equivalent to each user k G 
JC selecting one of M k messages, and sending a uniformly 
chosen codeword from among M k M k codewords for each. 
We can thus write the following: 



H{X k \W^X k c 



H(Wg) 



H(W^\X k o,Z) 
= H(W^X k ,X k c,Z) 

-H(X k c,Z) 
= ff(Z|W fc s ,X fe ,X fe c) +if(X fe ,X fe c|W fc s 

- H (X fc |W£,X fc c,Z) - H (X fc c , Z) 
= F(Z|X fc ,X fc e) +H(X k ,X k e\W£) +H{W£) 

- H(X k \Wi,X k a,Z) - H(Z\X k c) - H(X k a) 
= H(W£) + H(Z\X k , X fec ) + H{X k c - H(X k 

+ H(X k \X k .,W£) - ff(X fc |W^,X fc c, Z) - 
= H(WZ) - I(X k ; Z|X fc c) + I(X k ; Z|W£,X* 



(54) 

(55) 

(56) 
)(57) 
H(Z\X k c) 
) (58) 



where we used the fact that H(X k c\W k ) = H(X k c). By 
the GMAC coding theorem, we have I(X k ;Z\X k c) < nC%. 
We can also write I(X k ; Z\W^ X k .) = H{X k \W^,X k .) - 
H(X k \W k , X k a, Z). The coding scheme implies that 
H(X k \W^X k .) = H(X k \W°) = nCl Also, 
H(X k \W k , X fe c, Z) < nS n , where 5„ — * due to Fano's 
inequality; given W k , the subcode for user k is, with high 
probability, a "good" code for the wiretapper. Combining 
these in (58), we can write 

nCl - nCl + n5 n 



K > i - 



1 



(59) 



where e = -p 



as n — > oo. 

The corollary follows simply by using the definition of 6- 



X k has M k codewords with each component randomly 
drawn ~ A/"(0, X k P k — s) where e is an arbitrarily small SR k and substituting this into (29). 



achievability, and noting that if R k is achievable, then R k 



> 
□ 



C. Collective Constraints 

The proof is similar to the proof for individual constraints. 
Let PeP and R satisfy (33) and assume the coding scheme 
is as given in Appendix I-A. We choose the rates such that 

i + 



(60) 
(61) 

VS C K (62) 



[CI 

£fc=l ( R k + R k) = C K 

;kes ( R k + R l + R k) < Cs> 

so that we show the achievability of the boundary, which can 
be done by relabeling some of the open or extra messages 
as secret. Clearly, lower secrecy rates are also thus achieved. 
From (62) and the GMAC coding theorem, with high probabil- 
ity the receiver can decode the codewords with low probability 
of error. Define = Y2k=i ^fcXfc, and write 

H(W' K \Z) = H(W S K ,Z) - H(Z) (63) 

= jr(wkx E ,z)-jr(x E |wfc,z)-jr(z) (64) 

= P(W^)+P(Z|W^X E )-P(Z) 

+ P(X s |W^)-iJ(X s |W^,Z) (65) 



^(W^)-7(X s ;Z)-7(X E ;Z|Wg ) ) 



(66) 



where we used W S K -> X s -> Z =S> ff(Z| Wfc, X E ) = 
i?(Z|Xs) to get (66). We will consider the two mutual 
information terms individually. First, we have the trivial bound 
due to channel capacity: I(X E ; Z) < nC^. We write the sec- 
ond out as I(X E ;Z|Wfc) =JT(X E |W£)-ff(X E |W£,Z). 
Since user k sends one of MgM£ codewords for each mes- 
sage, ff(X E |Wfc) = n£* =1 {R% + R%) = nC% from (61). 
We can also write H(Xs[W)^,Z) < n8 n where S n — ► as 
n — > oo since, the eavesdropper can decode Xs given 
due to (61) and code construction. Using these in (66), we get 



A c k>1 



C 



K 



n 



C 



n 



= 1 



(67) 



where e 



as n 



The corollary simply follows from the definition of 5- 
achievability as in the proof of Corollary 1.1. □ 

D. TDMA 

In the TDMA scheme described in Theorem 3, only one 
user transmits at a time. Hence, H(W% \X k c, Z) = H(W£\Z) 
as at any given time the codewords of the remaining users 
do not provide any information to the eavesdropper about the 
transmitting user's message. As a result, both sets of secrecy 
constraints become equivalent. Since this is a collection of 
single-user schemes, using the achievability proof in [4], and 
noting that the degradedness condition is only used for proving 
the converse, we can, for each user, achieve 





(h k P k \ 




Uk9 


\a k J 





m 



( El 

Oik 



(68) 
(69) 



which, when simplified, gives (37). We can use time-sharing 
between different scheduling schemes to achieve the convex 
closure of the union over all a and power allocations. The 
corollary follows from Definition 2. □ 

Appendix II 
Outer Bounds 

We first adapt [4, Lemma 10] to upper bound the difference 
between the received signal entropies at the receiver and 
eavesdropper, when the eavesdropper's signal is degraded: 

Lemma 10 (Lemma 10 in [4]). Let £ = ^H(Y) where 
Y, Z are as given in (6). Then, 



H(Y) - H(Z) < n£ - n<K0 
2ne ( 1 - h 



(70) 



h2 2 ^ 
2ire 



(71) 



where = i log 
Corollary 10.1. 

H(Y\X S ) - H(Z\X S ) < n (C% c - C% c 

Proof: The proof is easily shown using the entropy power 
inequality, [29]: Recall that H(Z) = H(VhY + N MW ). Then, 
by the entropy power inequality 

2#H(Z) = 2 l: ff (\ / 'i Y + N Mw) > 2 |-[-ff(Y)+rilogv / ft:] , 2#-«(Nmw) 

(72) 

Now H(Y) = < and P(N MW ) = § log[27re(l - h)j. Hence, 
2- ff(z) > h2 2i + 27re(l - h) (73) 
which, after taking the log, gives 

h2^ Y 
+ 2^rJ_ 

subtracting from H(Y) = n£ completes the proof of the 
lemma. To see the corollary, write 



i?(Z)>-log 



27re 1 



(74) 



J?(Y|X 5 ) < -log(27re(l + P 5<: )) 



(75) 



Let #(Y|X S ) = n£. Then, £ < \ log (2?re(l + P S c)), and 
since (/>(£) is a non-increasing function of £, we get (/>(£) > 
| log (27re(l + Pso))). Since {X k } are independent, we 

Y|X 5 and Z -> Z|X S , 



can use the lemma with Y 
H(Y\X S ) - H(Z\X S 



(76) 



71 Ti 

< - log (27re(l + P S c)) - - log [27re (1 + hP S c)] (77) 



(78) 



□ 



We also present the following lemma that is valid for the 
general (non-degraded) case: 

Lemma 11. Let Then, 

I(W§;Y\X S o,Z)<H(Y\Xso)-H(Z\X S o)+ne n (79) 

Proof: I(W£;Y\X S c,Z) 

= H(Y\X S , , Z) - H (Y\W§, X S c, Z) 
<H(Y\X S c,Z)-H(Y\W§,X,c,Z) (80) 



= H(Y\X S c,Z)-H(Y\X K ,Z) (81) 

= 7(X s ;Y|X S c,Z) (82) 
= /(X s ;Y|X 5 c)+/(X 5 ;Z|X 5c ,Y) 

-I(Xs;Z|Xs.) (83) 

< 7(X S ; Y\X SC .) + H(X S \X S ,,Y) 

-/(X s ;Z|X S e) (84) 

< 7(X S ; Y\X S <) - I(X S ; Z\X S .) + ne n (85) 
= H(Y\X S .) - H(Y\X K ) - H(Z\X S c) 

+ H(Z\X K )+ne n (86) 

= ff(Y|X S c)- H{Z\X S c) + ne n (87) 

where e n — > as n — > oo and e — > 0. In (85) we used 
iJ(X s |X sc ,Y) < J7(W||X S c,Y) < ne„ where e„ 
as n — ► oo from Fano's inequality. The last step comes from 
H(Y\X K ) = H(N M ) = H(Z\X K ) = J7(N W ). □ 

A. Individual Constraints 

The proof is a simple extension of the proof of Lemma 7 
in [4], but stronger in the sense of [6] as we prove an outer 
bound satisfying H(W£\X k c, Z) > H{Wji) - e, for all k G 
/C. Clearly, any set of rates satisfying the original individual 
constraints also satisfies these constraints. We begin with: 

Lemma 12. The individual secrecy rates must satisfy: 

R s k <-(H(Y\X k a)-H(Z\X k .)) + e n (88) 
n 

Proof: Note that H{W s \X S a, Y, Z) < H(W S \Y) < 
ne' n for all S C JC from Fano's inequality. Using 

H(W£\X k c,Z) > H(W£) -e = nR%-e, we can write 

nR s k <H(W k s \X k c,Z)+e (89) 
< H (Wg |X fec , Z) + < - H (Wg |X fe = , Y, Z) (90) 
= J(Wj?;Y|X fc . J Z)+ne£ (91) 

and we can then use Lemma 11 with S = {k}. □ 
When Z is a degraded version of Y, Corollary 10.1 gives 



nEf=ifl*<ff(Wfc|Z) + e (94) 
< J ff(W^|Z)+ne„-i7(W^|Y,Z) (95) 
= I(W£;Y|Z)+ne„ (96) 

and we can then use Lemma 1 1 with S = JC. □ 
When Z is a degraded version of Y, Corollary 10.1 gives 



Rl<Cl 



(l-h)P k \ 
1 + hPk J 



(92) 



Corollary 5.1 follows by noting that a rate R is achievable 
| are such that (8R 5 k ,R s k ) 



iff all R s k are such that (5R s k , R k ) is achievable for user k. □ 



B. Collective Constraints 

We show that any achievable rate vector, R, needs to satisfy 
Theorem 6. We start with a lemma similar to Lemma 12: 



Lemma 13. 



where e_ 



* as e -> 0. 



ff(Z)) 



(93) 



Proo/- We have J7(W^|Y,Z) < J7(W^|Y) < ne' n 
from Fano's inequality. Using 77(W^|Z) > if(W^) — e = 
n Efc=i -R| — e, we can write 



jc = 9 



1 



Appendix III 
Sum Capacity for Degraded Case 



(97) 



For the individual constraints, we can find the following 
limit on sum capacity by noting that A^ > 1 for all k E JC 
implies > 1 as shown in Section III-A.l. Hence, when 
the individual constraints are satisfied, the collective constraint 
must also be satisfied. Thus, we can write 



K 

r , k <H(W^\Z) 



*!=i 



e < I{W S K ; 



Y\Z) 



(98) 



as in the proof of Lemma 13 and use Lemma 11 to get 

fe=l n k - °/C _ U K- 

For the collective constraint, the outer bound was given in 
Theorem 6 as C^ — C^. The scheme to get the achievable rates 
given in 2 achieves this rate, and hence is the sum-capacity 
for collective constraints. 

From Theorem 3, we see that TDMA achieves a secrecy 
sum-rate of EtLi ak 9 ( ^+hF% ) • Maximizing this over the 
time-sharing parameters {ctk}, is a convex optimization prob- 
lem over a k whose solution is 



Pk 



(99) 



C^. Since the individual constraints 



giving a sum rate of CJ£ 
are satisfied, this is an achievable sum-rate for the individual 
constraints, as well. Hence, the sum-capacity for both sets of 
constraints is Cj£ - CJ£. □ 

Appendix IV 
Sum-Rate Maximization 

A. Optimum Powers 

We start with writing the Lagrangian to be minimized, 

2 2 

£(P, n) = p(P) - Mifcft + E MA - Pk) (100) 



fe=i 



fe=i 



Equating the derivative of the Lagrangian to zero, we get 

ac(p*,/*) 



dp* 



(101) 



where Pj (P) = Y+pr^p- ■ It is easy to see that if hj > p(P*), 
then fiij > 0, and we have P* = Pj. If hj < p(P*), then 
we similarly find that P* = 0. Finally, if hj = p(P*), we can 
have < Pj* < Pj. However, then pj(P*) — 0, so we can 
set Pj = with no effect on the secrecy sum-rate. Thus, we 
have P* = Pj if hj < p(P*), and P* = if hj > p(P*). □ 



B. Cooperative Jamming 

The Lagrangian and its gradient are: 

2 2 

■ 

£(P,/i) 



P(P) 

02 (P 2 ) 



J2 + J2 - p ^ (102) 



fc=i 



fe=i 



~dP~Z 



Pi(P') 

02 



Mn + M21 = 



ac p 2 (p*)0 2 (p 2 *)- P (p*)0 2 (p 2 * 



<9P,* 



6f(P*) 



(103) 
(104) 

Ml2 + M22 = 



where 2 (P) 4 fc2 ^ p > . Consider user 1. The same argu- 
ment as in the sum-rate maximization proof leads to P* = P 
if hi < p(P*) and Pf = if /ii > p(P*). Now we need to 
find P 2 *. We can write (104) as 

dC ^2(P*) 

dP* (l+P 1 *+P 2 *)2(l + ^ 2 P 2 *)2-^ 2+ ^ 2 - (105) 

where V> 2 (P) = Pi h 2 (h 2 - h 1 ){P 2 - p){P 2 - p) and 

-h 2 (l ~ hi) - VD 



-h 2 {l-hi) + VD 
v = r~r, - P 



(106) 



h 2 (h 2 -hi) h 2 {h 2 -hi) 
D = hih 2 {h 2 - l)[(ha - 1) + (ha - /ii)Pi)] (107) 

Note that the optimum power allocation for user 1 is 
equivalent to Pf = P if hi < <j> 2 (P 2 *) and Pf = 
if fti > (j) 2 (P 2 ). Also observe that ?/> 2 (P) is an (upright) 
parabola in P 2 . If < 1, we automatically have P* = P. In 
addition, we have p < 0. We first find when P 2 = 0. We see 
that iJ,> 2 (P) > for all P € V if p < 0, equivalent to having 
two negative roots, or D < => /i 2 < 0i(P), equivalent to 
having no real roots of -02 ■ Consider < P 2 * < P. This is 
possible iff ip 2 (P*) = 0. Since P* > 0, this happens only 
when hi = h 2 or P 2 = p > 0. However, if hi = h 2 , we 
should be transmitting not jamming. The last case to examine 
is when P 2 * = P. This implies that ^(P) < 0, and is satisfied 
when p > P 2 . 

Assume h 2 > hi > 1. In this case, we are guaranteed 
p > 0. If P* = 0, then we must have P 2 = since the 
secrecy rate is 0. If hi = h 2 , then regardless of P 2 *, we have 
-0 2 (P, P 2 ) = and jamming does not affect secrecy capacity, 
and we have P 2 * = => Pf = 0. Assume h 2 > hi. We would 
like to find when we can have P* > 0. Since hi < 2 (P 2 ), 
we must have P 2 * > ^f^- > 0, and ^ 2 (P,P 2 *) < 0. This 
implies p < P 2 < p. It is easy to see that P 2 * = min {p, P} 
if T^f^- < min {p, P2 } and P 2 * = otherwise. 
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